lol777 Privacy Policy

1 Scope & Data Controller

This Privacy Policy applies to all personal information collected, used, stored, shared, or otherwise processed by lol777 ("the Company," "we," "our," or "us") in connection with your use of the lol777 online gaming platform, including the website at lol777.cam, associated mobile web experiences, customer support channels, and any promotional communications we issue.

lol777 acts as the data controller in respect of personal data collected directly from players registered on the platform. Where lol777 engages third-party service providers to process personal data on its behalf, such providers act as data processors under contractual data processing agreements that bind them to appropriate data protection standards.

This Policy is governed by and construed in accordance with Republic Act No. 10173 – the Data Privacy Act of 2012 of the Philippines and its implementing rules and regulations issued by the National Privacy Commission (NPC). lol777 is committed to full compliance with these requirements in all aspects of its personal data processing activities.

2 Personal Data We Collect

lol777 collects the following categories of personal data, depending on the nature of your interaction with the platform:

2.1 Registration & Identity Data

• Full legal name as it appears on a Philippine government-issued ID;
• Date of birth (for mandatory 21+ age verification under PAGCOR regulations);
• Residential address, including barangay, city or municipality, and region;
• Email address and mobile phone number;
• Username and encrypted password credentials;
• Government-issued identification documents submitted during KYC verification (e.g., Philippine passport, driver's license, SSS/UMID card, voter's ID).

2.2 Financial & Transaction Data

• GCash or PayMaya registered mobile number;
• Bank account holder name and account number for BPI, BDO, or Metrobank withdrawals;
• Deposit amounts, timestamps, and payment reference numbers;
• Withdrawal requests, amounts, status, and processing records;
• Account balance history and bonus fund activity.

2.3 Gaming Activity Data

• Game session logs including game type, bet amounts, outcomes, and timestamps;
• Sports betting slip history including markets, odds, and settlement records;
• Responsible gaming tool activations including deposit limits, session limits, and self-exclusion records.

2.4 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Session duration, page interaction data, and navigation patterns;
• Cookie identifiers and similar tracking technology data as described in Section 5.

2.5 Communications Data

• Support chat transcripts and email correspondence with the lol777 support team;
• Feedback, survey responses, and any unsolicited communications submitted voluntarily.

3 How We Use Your Personal Data

lol777 processes personal data only for specific, declared purposes. The table below sets out the primary purposes for which we use each category of data collected:

lol777 does not use personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legitimate legal basis for the new processing activity.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, lol777 relies on the following legal bases to process personal data:

• Contractual Necessity: Processing required to perform the agreement between lol777 and the player, including account management, game delivery, and payment processing;
• Legal Obligation: Processing required to comply with PAGCOR regulatory requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), and other applicable Philippine laws;
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics — where such interests do not override the player's fundamental privacy rights;
• Consent: Processing for direct marketing communications and for certain cookie-based data collection, where we have obtained your freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Cookies & Tracking Technologies

lol777 uses cookies and similar tracking technologies on the platform to ensure proper functionality, enhance user experience, and support analytics and security operations. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. These cannot be disabled without impacting core functionality.
• Functional Cookies: Remember your preferences such as language settings, last visited game category, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymized data about how players interact with the platform — including pages visited, session duration, and navigation paths — to help lol777 improve the service.
• Security Cookies: Help detect and prevent fraudulent activity, unusual login patterns, and unauthorized account access attempts.

You may manage cookie preferences through your browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality of certain platform features. lol777 does not use third-party advertising cookies or sell cookie-derived data to advertising networks.

6 Sharing Your Personal Data

lol777 does not sell, rent, or trade personal data to third parties for commercial or marketing purposes. Personal data is shared only in the following circumstances and with the following categories of recipients:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, and Cebuana receive the minimum data required to process deposit and withdrawal transactions. These providers operate their own privacy policies and comply with Bangko Sentral ng Pilipinas (BSP) data protection requirements.
• Identity Verification Providers: Third-party KYC service providers may process identity document images and biometric data on lol777's behalf under strict data processing agreements.
• PAGCOR and Regulatory Authorities: lol777 is required to report player data, transaction records, and gaming activity logs to PAGCOR and other competent Philippine authorities as required by law and under the terms of our operating license.
• Game Software Providers: Third-party game studios and live dealer providers receive session data necessary to deliver their games within the lol777 platform. These providers do not receive your full identity data.
• Legal and Law Enforcement: lol777 may disclose personal data to law enforcement agencies, courts, or other public authorities where required by a valid legal order, warrant, or obligation under Philippine law.
• Anti-Money Laundering Council (AMLC): Transaction records and identity data may be disclosed to the AMLC in accordance with Republic Act No. 9160 and its amendments.

7 International Data Transfers

The lol777 platform is operated from and primarily serves the Philippines. However, certain third-party service providers engaged by lol777 — including game software providers and technology infrastructure vendors — may be located outside the Philippines.

Where personal data is transferred to recipients in other countries, lol777 takes steps to ensure that adequate data protection safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines. These safeguards include contractual data processing agreements that impose data protection obligations on the recipient equivalent to those applicable in the Philippines.

By using the lol777 platform, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines in the circumstances described in this section.

8 Data Retention

lol777 retains personal data only for as long as it is necessary to fulfill the purposes for which it was collected, or as required by applicable law and PAGCOR regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the player's account and for a period of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and anti-money laundering obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• KYC Documents: Identity verification documents are retained for five (5) years from submission or from account closure, whichever is later.
• Support Communications: Customer support records are retained for three (3) years to facilitate dispute resolution and service quality review.
• Marketing Consent Records: Records of marketing consent are retained until you withdraw consent, plus a reasonable period thereafter to evidence compliance.
• Technical & Log Data: Server logs and technical data are retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted from lol777 systems or, where deletion is not immediately practicable, rendered permanently anonymous so that it can no longer be linked to any individual player.

9 Security Measures

lol777 implements a range of technical, organizational, and procedural security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and lol777 servers is encrypted using industry-standard SSL/TLS protocols;
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted in storage using AES-256 or equivalent encryption standards;
• Access Controls: Access to personal data is restricted to lol777 personnel with a documented legitimate operational need, controlled by role-based access management and subject to audit logging;
• Intrusion Detection: Network monitoring and intrusion detection systems are in place to identify and respond to unauthorized access attempts;
• Staff Training: All lol777 personnel with access to personal data undergo data privacy and security training consistent with NPC guidelines;
• Incident Response: lol777 maintains a documented personal data breach response procedure. In the event of a breach likely to cause serious harm to affected players, lol777 will notify the NPC and affected individuals within 72 hours of becoming aware of the breach, as required by the Data Privacy Act.

While lol777 takes all reasonable measures to protect your personal data, no transmission over the internet or electronic storage system is entirely free from risk. Players are responsible for maintaining the security of their account credentials.

10 Your Data Privacy Rights

As a data subject under Republic Act No. 10173, you hold the following rights in relation to personal data held by lol777. These rights may be exercised by contacting lol777's Data Protection Officer as described in Section 13.

lol777 will respond to verified data subject rights requests within thirty (30) calendar days of receipt, or within such shorter period as may be required by law. In cases of complexity, this period may be extended by a further thirty (30) days with notification to the requesting party.

11 Children's Privacy & Age Restriction

The lol777 platform is strictly for individuals who are 21 years of age or older, as required by PAGCOR regulations governing online gaming in the Philippines. lol777 does not knowingly collect or process personal data from individuals under the age of 21.

Age verification is a mandatory step in the account registration process. Where lol777 identifies that an account has been registered by or on behalf of a person under 21 years of age, that account will be immediately closed, any deposits returned where feasible, and the associated personal data deleted or retained only to the extent required for legal compliance and fraud prevention purposes.

If you believe that a person under 21 years of age has registered an account on the lol777 platform, please notify us immediately through the support channels described in Section 13.

12 Updates to This Privacy Policy

lol777 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, applicable law, PAGCOR regulatory requirements, or platform functionality. The effective date at the top of this document will be updated whenever a revision is made.

Where changes are material — meaning they meaningfully affect your rights or how your personal data is processed — lol777 will notify registered players via their registered email address or through a prominent in-platform notice prior to the changes taking effect, allowing a reasonable period for review.

Continued use of the lol777 platform following publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not accept the updated Policy, you should discontinue use of the platform and may close your account by contacting support.

13 Contact & Data Protection Officer

lol777 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you wish to exercise any of your data subject rights, submit a privacy-related inquiry, or raise a concern about how your personal data is handled, you may contact the lol777 DPO through the following channels:

• Email: [email protected] (plain text — not a clickable link) with the subject line "Privacy / DPO Request"
• Live Chat: Available daily from 8AM to 2AM PST through the lol777 platform — state that your query is a data privacy matter so it is routed to the appropriate team
• Registered Address: Makati City, Metro Manila, Philippines

If you are not satisfied with lol777's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data privacy complaints under Republic Act No. 10173.